
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json)
Hash identifier: RqOE+ntr4zFZSkkpjCHV8prX4o+Hkvebol7ecla4DpA=
Subject key identifier: 3E:DE:1D:6B:39:A1:46:43:A5:EE:11:A6:C9:BA:4A:5D:48:55:BE:3A
Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Certificate serial: 64C5077A9CB6CE1F02D3686E5E1A15F667CC89F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
Manifest number: B2
Signing time: Thu 30 Jan 2025 04:00:59 +0000
Manifest this update: Thu 30 Jan 2025 03:55:59 +0000
Manifest next update: Sun 02 Feb 2025 11:53:59 +0000
Files and hashes: 1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=)
2: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: ECyaxuiGpNnzbsBihEjpgYP+WOMolx2mh0xhDIy6ldU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c5:07:7a:9c:b6:ce:1f:02:d3:68:6e:5e:1a:15:f6:67:cc:89:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Validity
Not Before: Jan 30 03:55:59 2025 GMT
Not After : Feb 2 11:53:59 2025 GMT
Subject: CN=3EDE1D6B39A14643A5EE11A6C9BA4A5D4855BE3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:d3:f7:f8:e0:81:35:8c:94:dd:fc:77:ec:
11:ce:ce:b7:20:f8:07:81:9a:67:a2:6b:3c:e0:f5:
44:29:35:74:1a:cd:e2:5b:49:ba:cd:98:bf:81:0d:
8d:4f:11:a5:2f:55:0c:b7:b5:11:08:06:c8:ad:49:
7d:68:96:2b:c4:df:21:62:ca:08:6f:f7:d4:22:a9:
dd:bb:f0:9b:9d:fc:44:2f:49:d5:16:90:e8:1d:e3:
1f:58:ca:84:1c:3e:3f:ec:d2:bf:42:9d:32:55:41:
87:f9:7c:42:e1:18:6f:93:53:34:1a:c2:f4:c2:31:
cd:93:d2:04:de:63:2a:ae:64:cb:f2:f5:6c:80:e4:
54:fc:88:e0:52:bc:47:fd:04:69:2d:49:32:6d:05:
a6:aa:aa:d0:f1:6a:af:01:be:9c:03:5b:78:0c:77:
f9:c6:2b:4e:50:18:50:a8:2a:de:68:b5:a2:26:39:
75:93:bc:d5:d1:fa:36:04:f4:86:60:d2:48:1e:07:
8c:7d:46:dc:1f:c4:26:01:84:24:d1:6b:9a:28:71:
54:f3:02:f1:dd:7a:e1:2b:e1:b6:ef:45:24:40:3b:
40:ce:d0:d4:7e:70:55:07:93:01:06:b1:b7:3f:74:
1a:bb:a2:45:81:30:28:b6:8e:e1:51:a0:e8:23:5c:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DE:1D:6B:39:A1:46:43:A5:EE:11:A6:C9:BA:4A:5D:48:55:BE:3A
X509v3 Authority Key Identifier:
keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b2:48:cd:98:78:fa:31:05:37:29:0a:74:6a:9b:a9:51:8c:
68:6d:b4:55:17:d0:9f:38:ef:a8:ee:40:a0:45:fb:11:8b:d8:
32:f6:47:ce:ee:41:c3:04:13:e3:f3:04:b3:84:90:5a:f5:76:
40:a5:1f:01:06:2b:b1:a6:81:42:a3:87:92:c9:0a:af:3f:c9:
2e:b7:90:c0:62:ef:74:b7:ba:ee:bf:15:ee:e7:fd:b9:3a:17:
11:4d:5a:ed:d3:af:82:68:f3:ec:75:48:a3:c1:df:c5:94:5a:
ee:35:c5:51:0c:7b:b6:2e:51:38:50:10:49:8c:73:ce:d1:0a:
98:96:57:fb:af:4b:72:67:de:6e:13:28:3d:bb:29:db:0e:ff:
12:10:04:1a:f4:0f:dd:8c:06:f8:b9:1a:aa:97:0a:e2:9e:9e:
31:93:8a:64:d4:b8:63:12:cb:8d:d8:98:05:80:ac:14:cc:e3:
9f:a0:65:a2:a6:5e:19:7e:94:83:f9:00:33:ba:45:fc:d4:44:
c2:eb:6b:60:38:6d:84:05:e2:da:f1:ad:23:09:9e:4d:94:18:
08:27:71:d7:99:55:96:68:c5:5b:6f:46:d2:46:60:16:c6:25:
00:21:e8:2c:d9:63:8e:5c:97:a8:15:37:2d:25:16:51:2b:0b:
dc:1d:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:48 2025 by rpki-client